USN-3174-1: partially applies to MariaDB too

The 5.5 series update for 14.04 is now available.

Please use git-buildpackage to fetch and build from the ubuntu-14.04 branch at http://anonscm.debian.org/cgit/pkg-mysql/mariadb-5.5.git/log/?h=ubuntu-14.04

The repository uses pristine-tar, so there is no need to separately download the sources. You can just check the signature/SHA1SUM directly from the git-buildpackage generated tarball.

Test builds and testsuite passed on all platforms at https://launchpad.net/~mysql-ubuntu/+archive/ubuntu/mariadb/+builds?build_text=&build_state=all

The 10.0 series updates for 16.04 and 16.10 are now available.

Please use git-buildpackage to fetch and build from the ubuntu-16.04 and ubuntu-16.10 branches at http://anonscm.debian.org/cgit/pkg-mysql/mariadb-10.0.git

The repository uses pristine-tar, so there is no need to separately download the sources. You can just check the signature/SHA1SUM directly from the git-buildpackage generated tarball.

Test builds and testsuite passed on all platforms at https://launchpad.net/~mysql-ubuntu/+archive/ubuntu/mariadb-10.0/+builds?build_text=&build_state=all for Yakkety.

I was unable to run test builds for Xenial because the repo ran out of space and there is nothing suitable to delete to free some space. My request for more space at https://answers.launchpad.net/launchpad/+question/440393 has not been answered yet.

As a reminder, debdiffs can be browsed directly from the repo like this:

https://anonscm.debian.org/cgit/pkg-mysql/mariadb-10.0.git/diff/debian/?id=ubuntu/10.0.29-0ubuntu0.16.04.1&id2=ubuntu/10.0.28-0ubuntu0.16.04.1

https://anonscm.debian.org/cgit/pkg-mysql/mariadb-10.0.git/diff/debian/?id=ubuntu/10.0.29-0ubuntu0.16.10.1&id2=ubuntu/10.0.28-0ubuntu0.16.10.1

Or in a local clone with 'git diff <tag1>..<tag2> debian/'

Zesty should be fixed by importing latest mariadb-10.1 10.1.21 from Debian unstable once available.

Thanks for the branches, ACK. Packages are building now and will be published when done.

Thanks!

This bug was fixed in the package mariadb-5.5 - 5.5.54-1ubuntu0.14.04.1

---------------
mariadb-5.5 (5.5.54-1ubuntu0.14.04.1) trusty-security; urgency=high

  * SECURITY UPDATE: New upstream release 5.5.54. Includes fixes for the
    following security vulnerabilities (LP: #1657594):
    - CVE-2017-3318
    - CVE-2017-3317
    - CVE-2017-3312
    - CVE-2017-3291
    - CVE-2017-3265
    - CVE-2017-3258
    - CVE-2017-3244
    - CVE-2017-3243
    - CVE-2017-3238
    - CVE-2016-6664

 -- Otto Kekäläinen <email address hidden> Thu, 19 Jan 2017 00:46:44 +0200

This bug was fixed in the package mariadb-10.0 - 10.0.29-0ubuntu0.16.04.1

---------------
mariadb-10.0 (10.0.29-0ubuntu0.16.04.1) xenial-security; urgency=high

  * SECURITY UPDATE: New upstream release 10.0.29. Includes fixes for the
    following security vulnerabilities (LP: #1657594):
    - CVE-2017-3318
    - CVE-2017-3317
    - CVE-2017-3312
    - CVE-2017-3291
    - CVE-2017-3265
    - CVE-2017-3258
    - CVE-2017-3257
    - CVE-2017-3244
    - CVE-2017-3243
    - CVE-2017-3238
    - CVE-2016-6664

 -- Otto Kekäläinen <email address hidden> Thu, 19 Jan 2017 08:58:35 +0200

This bug was fixed in the package mariadb-10.0 - 10.0.29-0ubuntu0.16.10.1

---------------
mariadb-10.0 (10.0.29-0ubuntu0.16.10.1) yakkety-security; urgency=high

  * SECURITY UPDATE: New upstream release 10.0.29. Includes fixes for the
    following security vulnerabilities (LP: #1657594):
    - CVE-2017-3318
    - CVE-2017-3317
    - CVE-2017-3312
    - CVE-2017-3291
    - CVE-2017-3265
    - CVE-2017-3258
    - CVE-2017-3257
    - CVE-2017-3244
    - CVE-2017-3243
    - CVE-2017-3238
    - CVE-2016-6664

 -- Otto Kekäläinen <email address hidden> Thu, 19 Jan 2017 00:32:48 +0200

mariadb-10.1 10.1.21-5 has made it into zesty, which addresses the CVEs here, closing that task.

mariadb-10.0 has been pulled from zesty (in favor of mariadb-10.1), marking that task invalid.

Thanks!